AWS Certified Developer - Associate DVA-C02Demo

By Amazon · Question Mode

QuestionQ27

Security

A development team maintains a web application by using a single AWS CloudFormation template. The template defines web servers and an Amazon RDS database. The team uses the Cloud Formation template to deploy the Cloud Formation stack to different environments.

During a recent application deployment, a developer caused the primary development database to be dropped and recreated. The result of this incident was a loss of data. The team needs to avoid accidental database deletion in the future.

Which solutions will meet these requirements?

Choose two
  • A Add a CloudFormation Deletion Policy attribute with the Retain value to the database resource.
  • B Update the CloudFormation stack policy to prevent updates to the database.
  • C Modify the database to use a Multi-AZ deployment.
  • D Create a CloudFormation stack set for the web application and database deployments.
  • E Add a Cloud Formation DeletionPolicy attribute with the Retain value to the stack.
Explanation

A DeletionPolicy attribute set to 'Retain' on the database resource prevents CloudFormation from deleting the database when the stack is deleted or updated. A stack policy that denies updates to the database resource provides an additional layer of protection by preventing accidental modifications or replacements. Together, these prevent both intentional and unintentional database loss.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!